A friend shared a link to their Wedding RSVP website. After several minutes, a Business Logic Flaw was identified - resulting in the ability to accept/decline RSVP invites on behalf of another person, access notes, and view/modify any other custom fields included in the form.
